ProFTPD module mod_tls

ProFTPD module `mod_tls_memcache`

The mod_tls_memcache submodule is contained in the mod_tls_memcache.c file, and is not compiled by default. Installation instructions are discussed here.

This submodule a memcached-based implementation of an external SSL session cache for use by the mod_tls module's TLSSessionCache directive. The module also implements a memcached-based implementation of an external OCSP response cache for the TLSStaplingCache directive.

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).

This product includes cryptographic software written by Eric Young ([email protected]).

Author

Please contact TJ Saunders <tj at castaglia.org> with any questions, concerns, or suggestions regarding this module.

The mod_tls_memcache module supports the "memcache" string for the type parameter of the TLSSessionCache configuration directive. The info parameter for mod_tls_memcache can be empty/blank, indicating a native binary encoding of the cached data), or it can be "/json", indicating that the cached data will be encoded using JSON. This means the TLSSessionCache setting will look like:

  # Use binary encoding for cached data
  TLSSessionCache memcache:

or:

  # Use JSON encoding for cached data
  TLSSessionCache memcache:/json

If memcache support has not been enabled in your proftpd, this configuration cannot be used.

The mod_tls_memcache module also supports the "memcache" string for the type parameter of the TLStaplingCache configuration directive, e.g.:

  TLSStaplingCache memcache:

Examples

  <IfModule mod_memcache.c>
    MemcacheEngine on
    MemcacheServers memcache-servers
  </IfModule>

  <IfModule mod_tls.c>
    ...

    <IfModule mod_tls_memcache.c>
      # Store the data formatted as JSON
      TLSSessionCache memcache:/json
      TLSStaplingCache memcache:
    </IfModule>
  </IfModule>

Logging
The mod_tls_memcache module supports trace logging, via the module-specific log channels:

tls.memcache

Thus for trace logging, to aid in debugging, you would use the following in your proftpd.conf:

  TraceLog /path/to/ftpd/trace.log
  Trace tls.memcache:20

This trace logging can generate large files; it is intended for debugging use only, and should be removed from any production configuration.

Installation

The mod_tls_memcache module is distributed with the ProFTPD source code. Simply follow the normal steps for using third-party modules in ProFTPD, being sure to include the mod_tls module (on which mod_tls_memcache depends), and enabling memcache support:

  $ ./configure --enable-memcache --with-modules=mod_tls:mod_tls_memcache
  $ make
  $ make install

Alternatively, if your proftpd was compiled with DSO support, you can use the prxs tool to build mod_tls_memcache as a shared module:

  $ prxs -c -i -d mod_tls_memcache.c